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: - Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
: : the application:. 

: Listing of Claims : 

' • " Claims .1-18.. (canceled) "\ 

19. (currently amended) A group signature device for providing a message ; 
: \ (m) accompanied by a group signature (S), comprising: 

means for storing personalized data (z, Kz) identifying sp individual 
member (M) of a group (G); 

encryption means (B3) for producing an encrypted text (C), intended to 
be associated with said message (m), using said personalized data (z, Kz) of one said 
• individual member (M) only ; 

signing means (B6) for producing the group signature (S) with a private 
^.signature key (SK) common to all group members using the message to be signed (m) 
. and said encrypted text (C) produced using the personalized data (z, Kz) of said.one , 
individual member (M) only; and 

means for outpvitting the message (m) andthe.group signature (S.) to a 
, ... checker, such that the checker, upon receiving the message accompanied by the group 

signature, is able to verify that the message (m) is associated with the group (G) based 

on the group signature (S), with the identity of th? individual member (M) of the 



Claim 20. (canceled) 
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21. (previously presented) A group signature device according to claim 19, 
further comprising: 

means (B5) for combining the message (m) to be signed and the encrypted text 



Claim 22 (canceled) 

23. (previously presented) A group signature device according to claim 19, .. 
wherein, : ' ' " ' -. \ - • 

said personalized data is an identifier (z) personal to the individual member 

XM); ' - - • ' " " • 

said means for storing further includes an encryption key (K) common to all 
members of the group (G); and 

encryption means (B3) produces said encrypted text (C) using the identifier (z) 
and said encryption key (K). 

24. (previously presented) A group signature device. according to claim 23, in 
which encryption means (B3) produces said encrypted text .'(C) using the identifier (z) 
and a random number (r). 

25 . (previously presented) A group signature device according to claim 19, 
...wherein 
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said personalized data is a diversified encryption key (Kz) specific to each . 
member (M) of the group (G); and 

encryption means (B3.) produces said encrypted text (C) using at least one data 



26. (previously presented) A group signature device according to claim 25, 
whereinsaid at least one data includes a. random number (r). 

27. (previously presented) A group signature device according to claim 19, 
vyherein the encryption means (B3) uses a secret key encryption algorithm. 

28. (previously presented) A group signature device according to claim 19, 
wherein the encryption means (B3) uses one of the Rivest, Shamir, Adleman (RSA) : 
public key encryption algorithm or the Advanced Encryption Standard (AES) secret ... 
;key encryption algorithm. 

29. (previously presented) A group signature device according to claim 19, 
wherein the signing means (B 6) uses # private key signature algorithm (SK). 

30. (previously presented) A group signature device according to claim 29, in 
which the private key signature algorithm is of the Riyest, Shamir, Adleman (RSA) •-. 

type.-' '■■ "•. \ ,-, 
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31. (previously presented) A group signature device according to claim 19, in . j ; 
whiph said group s \ j 

32. (previously presented) A group signature device according to claim 31, in , 
\'\\\ which said portable communicating device ; is a smart card. . • 

33. (currently amended) A method for secure communication of message (m) "" \ 
sent by an individual member (M) of a group (G) using a group si gnature (S), said 

method comprising: 

producing the group signature (S) of the message (m) by signing, with, a 
.'"I:-: ■ private signature key (SK) common to all group, members, a set including the message, 
: \ (m) and encrypted text (C) produced using a personalized data (z, Kz) of sai d one 
: : individual member (M) only; and 

: butputting the pessage (m) along with the group signature (S). 

34. (previously presented) The method according to claim 33, further 

: comprising: """ -,. "' \ ■•. 

verifying, by using a public key (PK) corresponding to said private signature ■ \ 
':':'■■.•[.'.].'■ key (SK), that, the message (m) is associated with the groyp (G) based on the group 
signature (S), without identifying the individual member (M) of the group (G). 

35. {previously presented) The method according to claim 33, further \ I 
comprising the steps pf: j 
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decrypting the encrypted text (C) thus obtaining the. personalized data (z, 
. Kz); and identifying the individual member (M) of the group (Q) based on said, 
personalized data (z, Kz). - " ....... 

3 6,_ (previously presented) The method of claim.35, further comprising: 
producing a private signature key (SK) common to all members of group 

producing personalized data (z, Kz) identifying the individual member 
: (M) accepted into the group (G); and 

registering said personalized data.(z, Kz) with the private signature key . 
(SK) in an electronic device personalized to said individual member (M) of the group 

i(Q), C-'^ 

Claims 37-38. (canceled) 

39, (currently amended) A group signature system for ensuring a secure 
pommunication of amessage (m) sent by an individual member (M) of a group (G) 
using a group signature (S), said group signature system comprising: 

.an electronicdevice configured to store a personalized data (z, Kz) ; 
identifying the -qne said individual member (M) of the group (G), to produce an. 



personalized data (z, Kz)4>f sgid one individual member (Mk and to produce the 
group signature (S) with a private signature key (SK) common to all group members 
using the message (in) ajid.said encrypted text (C) produced using. the personalized 
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• . data (z, Kz) of sai d.one individual member (M) only, and to output the message (m) j 
: -and the group signature (S); '4 . 

a checker that receives the message (ra) accompanied by the group ■ \ '£ : 

: signature (S) output from the electronic device, said. checker being configured to 
\ : verify that the message (m) is associated with the group (G) based on the group 
; signature (S), the identity of the individual memhp (M) .^mmning anonymoxis -to the . 
checker; and 

a trusted authority configured to identify the individual member (M) of 
the group (G). ; 

Claim 40. (canceled) 
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